Vulnerability Description
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Smartcloud Analytics Log Analysis | 1.1.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV57425
- http://www-01.ibm.com/support/docview.wss?uid=swg21669137Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- http://www-01.ibm.com/support/docview.wss?uid=swg21676091
- http://www-01.ibm.com/support/docview.wss?uid=swg21676092
- http://www.securityfocus.com/bid/67051
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89854
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV57425
- http://www-01.ibm.com/support/docview.wss?uid=swg21669137Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- http://www-01.ibm.com/support/docview.wss?uid=swg21676091
- http://www-01.ibm.com/support/docview.wss?uid=swg21676092
- http://www.securityfocus.com/bid/67051
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89854
FAQ
What is CVE-2013-6738?
CVE-2013-6738 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an inva...
How severe is CVE-2013-6738?
CVE-2013-6738 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-6738?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Smartcloud Analytics Log Analysis.